GDPR Compliance

Last updated: February 2026

1. Our Commitment

MedGemma IATRIKI TECHNOLOGIA & KAINOTOMIA P.C. (GEMI No.: 191929003000, Vasileiou Voulgaroktonou 16, 12462 Haidari, Greece), hereinafter "MEDGemma", is fully committed to compliance with the European Union's General Data Protection Regulation (GDPR). We implement appropriate technical and organizational measures to protect the personal data we process and ensure that all processing is carried out in accordance with the principles of the Regulation.

2. Legal Basis for Processing

We process personal data based on one or more of the following legal bases:

  • Consent: When you have given us explicit consent for a specific purpose
  • Contract performance: When processing is necessary for the performance of a contract with you
  • Legal obligation: When required to comply with a legal obligation
  • Legitimate interest: When processing is necessary for our legitimate interests, provided your rights do not override them

3. Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you
  • Right to rectification: You can request the correction of inaccurate or incomplete data
  • Right to erasure: You can request the deletion of your personal data under certain conditions
  • Right to restriction: You can request the restriction of processing of your data
  • Right to portability: You can receive your data in a structured, commonly used format
  • Right to object: You can object to the processing of your data for specific purposes

4. Data Protection Officer

For any data protection related matters, you can contact our Data Protection Officer at info@med-gemma.com.

5. International Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions.

6. Breach Notification

In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with Article 33 of the GDPR. If the breach is likely to pose a risk to your rights and freedoms, we will also inform you without undue delay.

7. Data Processors

To operate this website and its contact form we work with Cloudflare (hosting), Amazon Web Services (email delivery via Amazon SES, Stockholm region — within the EU) and Google Ireland Ltd. (corporate email and the appointment booking page). Data processing agreements under Article 28 GDPR are in place with each. Full detail is in our Privacy Policy.

8. Contact

For questions about GDPR compliance or to exercise your rights, contact us at info@med-gemma.com. Postal address: Vasileiou Voulgaroktonou 16, 12462 Haidari, Greece.